|  | 6.4 | Extended ACLs
| 6.4.2 | Extended ACL parameters

The complete form of the access-list command is: Router(config)# access-list access-list-number {permit | deny} protocol source [source-mask destination destination-mask operator operand] [established] The ip access-group command links an existing extended ACL to an interface. Remember that only one ACL per interface, per direction, per protocol is allowed. The format of the command is: Router(config-if)# ip access-group access-list-number {in | out}
| Interactive Syntax Activity (Flash, 135 kB)
| Try out this activity to test yourself on the proper command syntax for Extended Access Control Lists (ACLs) parameters.